<html>
<head><meta charset="utf-8"><title>code signing · t-infra · Zulip Chat Archive</title></head>
<h2>Stream: <a href="https://rust-lang.github.io/zulip_archive/stream/242791-t-infra/index.html">t-infra</a></h2>
<h3>Topic: <a href="https://rust-lang.github.io/zulip_archive/stream/242791-t-infra/topic/code.20signing.html">code signing</a></h3>

<hr>

<base href="https://rust-lang.zulipchat.com">

<head><link href="https://rust-lang.github.io/zulip_archive/style.css" rel="stylesheet"></head>

<a name="215601931"></a>
<h4><a href="https://rust-lang.zulipchat.com#narrow/stream/242791-t-infra/topic/code%20signing/near/215601931" class="zl"><img src="https://rust-lang.github.io/zulip_archive/assets/img/zulip.svg" alt="view this post on Zulip" style="width:20px;height:20px;"></a> nagisa <a href="https://rust-lang.github.io/zulip_archive/stream/242791-t-infra/topic/code.20signing.html#215601931">(Nov 04 2020 at 16:03)</a>:</h4>
<p>There's a &lt;redacted&gt; that signs code as a service. But does not appear to support mac</p>



<a name="215601955"></a>
<h4><a href="https://rust-lang.zulipchat.com#narrow/stream/242791-t-infra/topic/code%20signing/near/215601955" class="zl"><img src="https://rust-lang.github.io/zulip_archive/assets/img/zulip.svg" alt="view this post on Zulip" style="width:20px;height:20px;"></a> nagisa <a href="https://rust-lang.github.io/zulip_archive/stream/242791-t-infra/topic/code.20signing.html#215601955">(Nov 04 2020 at 16:03)</a>:</h4>
<p>might still be worthwhile to investigate?</p>



<a name="215602054"></a>
<h4><a href="https://rust-lang.zulipchat.com#narrow/stream/242791-t-infra/topic/code%20signing/near/215602054" class="zl"><img src="https://rust-lang.github.io/zulip_archive/assets/img/zulip.svg" alt="view this post on Zulip" style="width:20px;height:20px;"></a> nagisa <a href="https://rust-lang.github.io/zulip_archive/stream/242791-t-infra/topic/code.20signing.html#215602054">(Nov 04 2020 at 16:04)</a>:</h4>
<p>err, <a href="http://signpath.io">signpath.io</a></p>



<a name="215602492"></a>
<h4><a href="https://rust-lang.zulipchat.com#narrow/stream/242791-t-infra/topic/code%20signing/near/215602492" class="zl"><img src="https://rust-lang.github.io/zulip_archive/assets/img/zulip.svg" alt="view this post on Zulip" style="width:20px;height:20px;"></a> Pietro Albini <a href="https://rust-lang.github.io/zulip_archive/stream/242791-t-infra/topic/code.20signing.html#215602492">(Nov 04 2020 at 16:06)</a>:</h4>
<p>I think the biggest problem we have is macOS</p>



<a name="215602523"></a>
<h4><a href="https://rust-lang.zulipchat.com#narrow/stream/242791-t-infra/topic/code%20signing/near/215602523" class="zl"><img src="https://rust-lang.github.io/zulip_archive/assets/img/zulip.svg" alt="view this post on Zulip" style="width:20px;height:20px;"></a> Pietro Albini <a href="https://rust-lang.github.io/zulip_archive/stream/242791-t-infra/topic/code.20signing.html#215602523">(Nov 04 2020 at 16:07)</a>:</h4>
<p>I'd love a way to not having to manage mac minis for it</p>



<a name="215602644"></a>
<h4><a href="https://rust-lang.zulipchat.com#narrow/stream/242791-t-infra/topic/code%20signing/near/215602644" class="zl"><img src="https://rust-lang.github.io/zulip_archive/assets/img/zulip.svg" alt="view this post on Zulip" style="width:20px;height:20px;"></a> nagisa <a href="https://rust-lang.github.io/zulip_archive/stream/242791-t-infra/topic/code.20signing.html#215602644">(Nov 04 2020 at 16:07)</a>:</h4>
<p>might make sense to reach out and signal interest? maybe they got something beta etc?</p>



<a name="215607401"></a>
<h4><a href="https://rust-lang.zulipchat.com#narrow/stream/242791-t-infra/topic/code%20signing/near/215607401" class="zl"><img src="https://rust-lang.github.io/zulip_archive/assets/img/zulip.svg" alt="view this post on Zulip" style="width:20px;height:20px;"></a> Florian Gilcher <a href="https://rust-lang.github.io/zulip_archive/stream/242791-t-infra/topic/code.20signing.html#215607401">(Nov 04 2020 at 16:38)</a>:</h4>
<p>They approached us 1-2 years and offered signing through their foundation: <a href="https://sig.fo/">https://sig.fo/</a></p>



<a name="215607518"></a>
<h4><a href="https://rust-lang.zulipchat.com#narrow/stream/242791-t-infra/topic/code%20signing/near/215607518" class="zl"><img src="https://rust-lang.github.io/zulip_archive/assets/img/zulip.svg" alt="view this post on Zulip" style="width:20px;height:20px;"></a> Florian Gilcher <a href="https://rust-lang.github.io/zulip_archive/stream/242791-t-infra/topic/code.20signing.html#215607518">(Nov 04 2020 at 16:39)</a>:</h4>
<p>We said no, but we can pick that up again.</p>



<a name="215611069"></a>
<h4><a href="https://rust-lang.zulipchat.com#narrow/stream/242791-t-infra/topic/code%20signing/near/215611069" class="zl"><img src="https://rust-lang.github.io/zulip_archive/assets/img/zulip.svg" alt="view this post on Zulip" style="width:20px;height:20px;"></a> Pietro Albini <a href="https://rust-lang.github.io/zulip_archive/stream/242791-t-infra/topic/code.20signing.html#215611069">(Nov 04 2020 at 17:03)</a>:</h4>
<p>I don't think windows signing is going to be a problem, like at all, once we have the foundation up and running</p>



<a name="215611121"></a>
<h4><a href="https://rust-lang.zulipchat.com#narrow/stream/242791-t-infra/topic/code%20signing/near/215611121" class="zl"><img src="https://rust-lang.github.io/zulip_archive/assets/img/zulip.svg" alt="view this post on Zulip" style="width:20px;height:20px;"></a> Pietro Albini <a href="https://rust-lang.github.io/zulip_archive/stream/242791-t-infra/topic/code.20signing.html#215611121">(Nov 04 2020 at 17:03)</a>:</h4>
<p>I'm more worried about macOS, as we need to have a mac somewhere in the release process for that to work :(</p>



<a name="215612743"></a>
<h4><a href="https://rust-lang.zulipchat.com#narrow/stream/242791-t-infra/topic/code%20signing/near/215612743" class="zl"><img src="https://rust-lang.github.io/zulip_archive/assets/img/zulip.svg" alt="view this post on Zulip" style="width:20px;height:20px;"></a> Pietro Albini <a href="https://rust-lang.github.io/zulip_archive/stream/242791-t-infra/topic/code.20signing.html#215612743">(Nov 04 2020 at 17:14)</a>:</h4>
<p>btw, me and <span class="user-mention" data-user-id="116122">@simulacrum</span> are going to have a call tomorrow to plan how to implement codesigning, at <a href="https://everytimezone.com/s/9da536a5">https://everytimezone.com/s/9da536a5</a></p>



<a name="215612801"></a>
<h4><a href="https://rust-lang.zulipchat.com#narrow/stream/242791-t-infra/topic/code%20signing/near/215612801" class="zl"><img src="https://rust-lang.github.io/zulip_archive/assets/img/zulip.svg" alt="view this post on Zulip" style="width:20px;height:20px;"></a> Pietro Albini <a href="https://rust-lang.github.io/zulip_archive/stream/242791-t-infra/topic/code.20signing.html#215612801">(Nov 04 2020 at 17:15)</a>:</h4>
<p>everyone is welcome to attend! if you're interested PM me and I'll send you the invite</p>



<a name="215638421"></a>
<h4><a href="https://rust-lang.zulipchat.com#narrow/stream/242791-t-infra/topic/code%20signing/near/215638421" class="zl"><img src="https://rust-lang.github.io/zulip_archive/assets/img/zulip.svg" alt="view this post on Zulip" style="width:20px;height:20px;"></a> nagisa <a href="https://rust-lang.github.io/zulip_archive/stream/242791-t-infra/topic/code.20signing.html#215638421">(Nov 04 2020 at 20:40)</a>:</h4>
<p>yeah I mean, maybe they have something in beta for macos signing is what I'm saying.</p>



<a name="215722761"></a>
<h4><a href="https://rust-lang.zulipchat.com#narrow/stream/242791-t-infra/topic/code%20signing/near/215722761" class="zl"><img src="https://rust-lang.github.io/zulip_archive/assets/img/zulip.svg" alt="view this post on Zulip" style="width:20px;height:20px;"></a> Pietro Albini <a href="https://rust-lang.github.io/zulip_archive/stream/242791-t-infra/topic/code.20signing.html#215722761">(Nov 05 2020 at 14:58)</a>:</h4>
<p>summary: <a href="https://paper.dropbox.com/doc/promote-release-2020-11-05--A~0qfi693FxX5xq5Am6qZC6VAg-XGAOchbMoQVpq610gV69r">https://paper.dropbox.com/doc/promote-release-2020-11-05--A~0qfi693FxX5xq5Am6qZC6VAg-XGAOchbMoQVpq610gV69r</a></p>



<a name="215770075"></a>
<h4><a href="https://rust-lang.zulipchat.com#narrow/stream/242791-t-infra/topic/code%20signing/near/215770075" class="zl"><img src="https://rust-lang.github.io/zulip_archive/assets/img/zulip.svg" alt="view this post on Zulip" style="width:20px;height:20px;"></a> Igor Matuszewski <a href="https://rust-lang.github.io/zulip_archive/stream/242791-t-infra/topic/code.20signing.html#215770075">(Nov 05 2020 at 20:32)</a>:</h4>
<p>(this might be of interest to you <span class="user-mention" data-user-id="223910">@Daniel Silverstone</span> , I remember we talked about signing Rust releases)</p>



<hr><p>Last updated: Aug 07 2021 at 22:04 UTC</p>
</html>